Firetruck

CVE-2024-4040

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

CrushFTP contains an unspecified sandbox escape vulnerability that allows a remote attacker to escape the CrushFTP virtual file system (VFS).

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
crushftpcrushftp / crushftp>= 10.0, < 10.7.1affected
crushftpcrushftp / crushftp>= 11.0, < 11.1.0affected
CrushFTPCrushFTP / CrushFTP>= 10.0, < 10.7.1affected
CrushFTPCrushFTP / CrushFTP>= 11.0, < 11.1.0affected